Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5052-1
HistoryAug 26, 2021 - 12:00 a.m.

MongoDB vulnerability

2021-08-2600:00:00
ubuntu.com
113
mongodb
session persistence
ubuntu 20.04 lts
ubuntu 18.04 esm
elevated privileges
remote attacker

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

44.1%

JSON

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • mongodb - Document-oriented database

Details

MongoDB would fail to properly invalidate existing sessions for deleted
users. This could allow a remote authenticated attacker to gain elevated
privileges if their user account was recreated with elevated privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchmongodb-server< 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.2UNKNOWN
Ubuntu20.04noarchmongodb< 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.2UNKNOWN
Ubuntu20.04noarchmongodb-clients< 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.2UNKNOWN
Ubuntu20.04noarchmongodb-clients-dbgsym< 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.2UNKNOWN
Ubuntu20.04noarchmongodb-server-core< 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.2UNKNOWN
Ubuntu20.04noarchmongodb-server-core-dbgsym< 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.2UNKNOWN
Ubuntu18.04noarchmongodb-server< 1:3.6.3-0ubuntu1.3UNKNOWN
Ubuntu18.04noarchmongodb< 1:3.6.3-0ubuntu1.3UNKNOWN
Ubuntu18.04noarchmongodb-clients< 1:3.6.3-0ubuntu1.3UNKNOWN
Ubuntu18.04noarchmongodb-clients-dbgsym< 1:3.6.3-0ubuntu1.3UNKNOWN
Rows per page:
1-10 of 121

Related

prion 1
ubuntucve 1
nvd 1
openvas 3
osv 2
cvelist 1
freebsd 1
cve 1
redhatcve 1
ibm 2
debiancve 1
nessus 2
mongodb 1
talos 1
prion
prion
Authorization
2019-08-06 19:15:00
ubuntucve
ubuntucve
CVE-2019-2386
2019-08-06 00:00:00
nvd
nvd
CVE-2019-2386
2019-08-06 19:15:13
openvas
openvas
MongoDB 3.4 < 3.4.22, 3.6 < 3.6.13, 4.0 < 4.0.9, 4.1 < 4.1.9 User Session Vulnerability - Linux
2019-08-09 00:00:00
MongoDB 3.4 < 3.4.22, 3.6 < 3.6.13, 4.0 < 4.0.9, 4.1 < 4.1.9 User Session Vulnerability - Windows
2019-08-09 00:00:00
Ubuntu: Security Advisory (USN-5052-1)
2021-08-26 00:00:00
osv
osv
mongodb vulnerability
2021-08-26 01:55:29
CVE-2019-2386
2019-08-06 19:15:13
cvelist
cvelist
CVE-2019-2386 Authorization session conflation
2019-08-06 18:32:07
freebsd
freebsd
mongodb -- Attach IDs to users
2019-08-06 00:00:00
cve
cve
CVE-2019-2386
2019-08-06 19:15:13
redhatcve
redhatcve
CVE-2019-2386
2019-08-27 18:21:34
ibm
ibm
Security Bulletin: A Security Vulnerability affects IBM Cloud Private Core Services (CVE-2019-2386)
2019-11-23 14:27:10
Security Bulletin: Vulnerabilities in MongoDB affects IBM Watson Studio Local
2019-12-20 21:26:28
debiancve
debiancve
CVE-2019-2386
2019-08-06 19:15:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : MongoDB vulnerability (USN-5052-1)
2021-08-26 00:00:00
FreeBSD : mongodb -- Attach IDs to users (880bca8f-e201-11e9-8af7-08002720423d)
2019-10-14 00:00:00
mongodb
mongodb
CVE-2019-2386
2019-08-06 18:15:24
talos
talos
MongoDB Server session reuse vulnerability
2019-08-06 00:00:00

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

44.1%

JSON
Related for USN-5052-1
prion1ubuntucve1nvd1openvas3osv2cvelist1freebsd1cve1redhatcve1ibm2debiancve1nessus2mongodb1talos1